Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/yaPCuNrrX83-Pxx0H1wo33FHYxU.roa
File: yaPCuNrrX83-Pxx0H1wo33FHYxU.roa (raw, json)
Hash identifier: +MTRoMNkJZx02gneUDwym1W12IVd+dS9xzLwjrcfrFU=
Subject key identifier: C9:A3:C2:B8:DA:EB:5F:CD:FE:3F:1C:74:1F:5C:28:DF:71:47:63:15
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 056EE754
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/yaPCuNrrX83-Pxx0H1wo33FHYxU.roa
Signing time: Sat 01 Jan 2022 00:53:53 +0000
ROA not before: Sat 01 Jan 2022 00:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21108
IP address blocks: 193.221.84.0/24 maxlen: 24
193.221.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91154260 (0x56ee754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jan 1 00:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9a3c2b8daeb5fcdfe3f1c741f5c28df71476315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:fc:fb:68:75:bb:de:4b:74:df:4c:33:9c:
70:48:48:77:bd:aa:cf:44:14:10:e0:42:a3:d7:79:
06:08:20:27:d4:c3:9d:66:ef:a0:d7:b1:06:4e:f3:
b0:8b:e2:ff:f8:92:46:c1:36:df:b2:ef:18:a1:b2:
6b:33:2a:4d:7d:7d:0b:21:16:1d:2b:89:2a:41:d1:
46:fa:6b:c4:c8:6e:5e:e5:d4:cf:af:8e:1b:3f:7a:
f0:48:37:42:d8:aa:bc:93:fb:45:5e:f8:2f:af:69:
57:a6:e2:b5:2c:65:b4:11:41:2b:93:c5:b0:c2:ba:
3b:12:06:f0:a3:de:29:59:f2:f7:8d:8f:bf:20:52:
f4:0b:06:df:d9:cc:79:ca:8a:30:0d:ea:dd:ec:ac:
fb:0c:11:13:3c:1b:32:7c:3f:b1:86:e5:55:18:14:
50:a4:64:b7:c5:e0:82:55:6e:8a:6f:2f:4b:6a:e9:
9b:d6:08:45:22:b9:bc:ae:a4:a1:87:db:ed:41:c4:
2a:77:de:63:06:66:e7:1b:04:0c:b3:8c:c2:9c:e9:
6a:3e:a8:f1:ea:b7:4a:80:3f:1d:ae:4d:d0:6c:bf:
67:79:42:16:3c:d3:a5:5f:a2:c4:44:c2:d4:32:e6:
07:8d:fe:d7:2d:4f:4b:6f:9d:12:94:22:bf:5b:99:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:C2:B8:DA:EB:5F:CD:FE:3F:1C:74:1F:5C:28:DF:71:47:63:15
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/yaPCuNrrX83-Pxx0H1wo33FHYxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:73:d2:2b:c5:35:33:fc:44:e1:63:f9:ff:03:11:1a:dc:3b:
8a:10:63:ec:50:68:e6:a4:2e:6d:29:4c:0d:48:81:d7:7b:61:
f6:bc:a2:49:28:7e:19:d4:6e:b4:6e:5c:bf:4b:1c:c5:48:f8:
c2:7e:4a:e9:f8:fe:e5:76:79:7e:94:3a:8d:c0:6c:59:a4:90:
bc:fc:f5:6c:f2:c6:b3:05:5d:1d:db:60:40:54:ae:88:e4:21:
ba:7a:9f:f5:87:32:37:94:cc:21:ec:da:ec:fa:95:ba:ee:cb:
0c:c7:7b:64:ab:8a:48:21:61:78:ba:97:7d:05:52:a9:b7:7f:
a0:46:25:2a:5e:18:6a:4c:54:de:9c:57:85:f0:2d:f0:5a:40:
fe:31:d9:73:e3:c4:bd:6a:a1:b1:6a:a0:3f:ff:18:6e:bb:dc:
c7:1e:8b:93:e9:17:e0:87:b2:a9:ff:6a:91:1c:4b:e7:e2:34:
2f:6b:cf:1b:7b:33:6b:85:40:e1:ab:00:ad:6c:ff:7c:81:43:
b5:b7:bc:d3:41:4c:0b:8c:4c:da:11:d3:7a:a1:8e:11:bc:5e:
85:01:6b:11:e2:67:3f:bc:d7:80:a4:dc:48:e0:58:05:b3:4b:
53:d5:02:36:30:87:2b:50:4d:72:33:dc:f7:78:fd:3d:36:f5:
a4:bd:d2:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBW7nVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGM1ZjA5YjNhOTAzOTUwZjNmY2QxYjI1NTA4NmVkZTQ4NzZlYjExMB4XDTIyMDEw
MTAwNTM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzlhM2MyYjhkYWVi
NWZjZGZlM2YxYzc0MWY1YzI4ZGY3MTQ3NjMxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWW/PtodbveS3TfTDOccEhId72qz0QUEOBCo9d5BgggJ9TD
nWbvoNexBk7zsIvi//iSRsE237LvGKGyazMqTX19CyEWHSuJKkHRRvprxMhuXuXU
z6+OGz968Eg3QtiqvJP7RV74L69pV6bitSxltBFBK5PFsMK6OxIG8KPeKVny942P
vyBS9AsG39nMecqKMA3q3eys+wwREzwbMnw/sYblVRgUUKRkt8XgglVuim8vS2rp
m9YIRSK5vK6koYfb7UHEKnfeYwZm5xsEDLOMwpzpaj6o8eq3SoA/Ha5N0Gy/Z3lC
FjzTpV+ixETC1DLmB43+1y1PS2+dEpQiv1uZgisCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJo8K42utfzf4/HHQfXCjfcUdjFTAfBgNVHSMEGDAWgBRoxfCbOpA5UPP8
0bJVCG7eSHbrETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FNWHdtenFRT1ZEel9OR3lWUWh1M2toMjZ4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZWZhMThkLTA5MDctNDU5My1hYmI4LTk0ODAyNjM2YmFkOS8x
L3lhUEN1TnJyWDgzLVB4eDBIMXdvMzNGSFl4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZWZhMThkLTA5MDctNDU5My1hYmI4LTk0ODAyNjM2YmFkOS8xL2FNWHdtenFRT1ZE
el9OR3lWUWh1M2toMjZ4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcHdVDANBgkqhkiG9w0BAQsFAAOC
AQEATnPSK8U1M/xE4WP5/wMRGtw7ihBj7FBo5qQubSlMDUiB13th9ryiSSh+GdRu
tG5cv0scxUj4wn5K6fj+5XZ5fpQ6jcBsWaSQvPz1bPLGswVdHdtgQFSuiOQhunqf
9YcyN5TMIeza7PqVuu7LDMd7ZKuKSCFheLqXfQVSqbd/oEYlKl4YakxU3pxXhfAt
8FpA/jHZc+PEvWqhsWqgP/8Ybrvcxx6Lk+kX4Ieyqf9qkRxL5+I0L2vPG3sza4VA
4asArWz/fIFDtbe800FMC4xM2hHTeqGOEbxehQFrEeJnP7zXgKTcSOBYBbNLU9UC
NjCHK1BNcjPc93j9PTb1pL3S6Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:17 2025 by rpki-client